PT-2019-7864 · Shekar · Shekar Endoscope

Published 2019-06-17 · Updated 2019-06-20 · CVE-2017-10720

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Shekar Endoscope (affected versions not specified)

Description The desktop application used to connect to the Shekar Endoscope device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This allows an attacker to execute code on the user's system directly, potentially gaining access to all the data the user has access to. The application uses a dynamic link library (DLL) called "avilib.dll" to send binary packets to the device, including a function called "sendchangename" that allows a user to change the Wi-Fi name on the device. This function calls a sub-function "sub 75876EA0" which determines the action to execute based on the parameters sent to it. The function uses the memmove function, which leads to a stack overflow when the length of the data string passed as the first parameter exceeds a certain limit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-10720

Affected Products

Shekar Endoscope

References · 5

• 🔥 https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Shekar_boriscope_sec_issues.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-10720 · Security Note
• https://seclists.org/bugtraq/2019/Jun/8 · Note
• https://t.me/cibsecurity/4969 · Telegram Post
• http://packetstormsecurity.com/files/153241/Shekar-Endoscope-Weak-Default-Settings-Memory-Corruption.html · Note